No results found.
    Navigation

    Robot Portal

    Easily manage all aspects of your account | Knowledgebase |

    Knowledgebase

    How to Protect WHMCS?

    Move the attachments, downloads & templates_c folders

    The three folders "attachments", "downloads" and "templates_c" need to be writeable by WHMCS and therefore require the permissions 777 (writeable by all). When folders have this permission level it is safer to place the folders outside of the public accessible folder tree on your website. WHMCS allows you to do this. If you do move the folders, then you must tell WHMCS where they have been moved to by adding the following lines to your configuration.php file:

    $templates_compiledir = "/home/username/templates_c/";
    $attachments_dir = "/home/username/attachments/";
    $downloads_dir = "/home/username/downloads/";

    In the above example, "username" is the cpanel username and so the 3 folders are located in the home directory, above public_html.

    Note that if you are running suphp or phpsuexec you should not make the mode changes as the folders will already be writeable. In fact, you cannot set folder or file permissions to be 777 when running suphp or phpsuexec - the highest permissions are 755 for both folders and files.

    Change your WHMCS Admin Folder name

    Malicious users who visit your site and recognise a WHMCS install will know that they can try logging into your admin area via the admin folder. To protect against this, you can rename the admin folder name to any name you like. You cannot move the folder - only rename it. You can then tell WHMCS what the name of that folder is for the links in admin notification emails by adding the following line to your configuration.php file:

    $customadminpath = "myfoldername";

    Replace "myfoldername" above with the new name you just gave to your admin folder.

    Please note that if you have already created a cron job, or one has been created for you, you will need to update the path on the cron as well.

    Example: php -q /home/mylogin/public_html/secure/myfoldername/cron.php

    Restrict Access by IP

    For added security, if your staff use fixed IP addresses, you can add even more protection to your admin area by restricting access to a specific set of IPs. This is done by creating a file with the name .htaccess within your WHMCS admin directory, with the following content:

    order deny,allow
    allow from 12.34.5.67
    allow from 98.76.54.32
    deny from all

    You can specify as many different allow from lines as you require. Or you can even allow entire IP subnet's by specifying just the first part of an IP, for example: "12.34.". This is called Htaccess IP Restriction.

    • 142 Users Found This Useful

    Was this answer helpful?

    Related Articles

    My Joomla has been hacked!

    A Joomla is usually compromised when it or its components / modules are outdated. Another very...

    What happens to someone abusing system resources?

    The offending site will be suspended and the owner will be given an opportunity to fix the...

    How to submit a DMCA complaint?

    Reporting copyright infringement? You must follow these steps before submitting any information...

    SQL injection, insertion!

    SQL injection is an attack where malicious code is passed to an SQL Server for execution. The...

    My account was hacked!

    If you are the victim of a hacker you can mail to our support department and our experts will...

    Over 20000 Satisfied Customers!

    • vps web hosting reviewer
      Porfirio Santos
      Technician, Diageo PLC

      Centrio support team have been amazingly responsive and helpful to any of my queries, thank you so much to the Centriohost have been amazingly responsive and helpful to any of my queries 👍👍👍 ~ . . . Read more

    • wordpress hosting plans reviewer
      Catherine Auer
      Doctor, SmartClinics

      Anytime I've had a problem I can't solve, I've found Centriohost to be diligent and persistent. They simply won't let an issue go until the client is happy. ~ . . . Read more

    • reseller hosting reviewer
      Effectivo Social
      Freelancer, Fiverr

      Recommend their shared hosting for all my SME web design clients. Their cloud or VME offerings are too great to deal with. Pricing is perfect and suitable for all users (͠≖ ͜ʖ͠≖) 👌 ~ . . . Read more

    • web hosting reviewer
      Valerie Quinn
      CTO, Acteon Group

      Centriohost staff were fantastic, I had a concern with a domain and they got back to me very quickly and they helped me to resolve the issue! ~ . . . Read more

    • Joomla hosting reviewer
      Collin Bryan
      Photographer, Allister Freeman

      I'm using centrio for my portfolio since 2006. The transition was seamless, the support was immediate, and everything works perfectly. ~ . . . Read more

    • dedicated server reviewer
      Harry Collett
      Actor, A&J Artists

      Very easy to understand & use even though I am not very technologically minded. No complications whatsoever & I wouldn't hesitate to recommend it to all. ~ . . . Read more

    • vps web hosting reviewer
      Porfirio Santos
      Technician, Diageo PLC

      Centrio support team have been amazingly responsive and helpful to any of my queries, thank you so much to the Centriohost have been amazingly responsive and helpful to any of my queries 👍👍👍 ~ . . . Read more

    • wordpress hosting plans reviewer
      Catherine Auer
      Doctor, SmartClinics

      Anytime I've had a problem I can't solve, I've found Centriohost to be diligent and persistent. They simply won't let an issue go until the client is happy. ~ . . . Read more

    • reseller hosting reviewer
      Effectivo Social
      Freelancer, Fiverr

      Recommend their shared hosting for all my SME web design clients. Their cloud or VME offerings are too great to deal with. Pricing is perfect and suitable for all users (͠≖ ͜ʖ͠≖) 👌 ~ . . . Read more

    • web hosting reviewer
      Valerie Quinn
      CTO, Acteon Group

      Centriohost staff were fantastic, I had a concern with a domain and they got back to me very quickly and they helped me to resolve the issue! ~ . . . Read more

    • Joomla hosting reviewer
      Collin Bryan
      Photographer, Allister Freeman

      I'm using centrio for my portfolio since 2006. The transition was seamless, the support was immediate, and everything works perfectly. ~ . . . Read more

    • dedicated server reviewer
      Harry Collett
      Actor, A&J Artists

      Very easy to understand & use even though I am not very technologically minded. No complications whatsoever & I wouldn't hesitate to recommend it to all. ~ . . . Read more